Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-04852
HistoryJan 11, 2024 - 12:00 a.m.

GTKWave Arbitrary Write Vulnerability (CNVD-2024-04852)

2024-01-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
gtkwave
arbitrary write
vulnerability
code execution
.vcd files

0.001 Low

EPSS

Percentile

23.2%

GTKWave is a full-featured, GTK±based waveform viewer from GTKWave. An arbitrary write vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause arbitrary code execution via specially crafted .vcd files.

CPENameOperatorVersion
gtkwave gtkwaveeq3.3.115